IdenTrust: ICA with invalid CDP

RESOLVED FIXED IdenTrust Services, LLC

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

IdenTrust Services, LLC issued a new subordinate CA certificate on September 15, 2025, but identified issues with the Certificate Revocation List (CRL) the following day. The CRL Distribution Point (CDP) was incorrectly set to the certificate itself, leading to a compliance issue. The subordinate CA was revoked on September 17, 2025, after the mis-issuance was discovered. IdenTrust has since submitted a full incident report and implemented a systemic enforcement mechanism to ensure proper review and approval of certificate profiles in the future. All action items related to this incident have been completed, and the case is now resolved.

Model: gpt-4o-mini Generated: 2026-06-13 21:32 UTC Revised: 2026-06-16 19:28 UTC Confidence: 0.90 11 comments

Chronology

2025-09-15 New subordinate CA certificate issued.
2025-09-16 Issue with CRL identified.
2025-09-17 Subordinate CA revoked.
2025-11-14 Incident report closure requested.

Thread Activity

2025-09-26 IdenTrust Services, LLC — Preliminary incident report disclosed.
2025-10-10 IdenTrust Services, LLC — Full incident report submitted.
2025-10-21 IdenTrust Services, LLC — Action items updated to include systematic enforcement.
2025-11-14 IdenTrust Services, LLC — Report closure summary provided.

Participants

IdenTrust Services, LLC Google representative CCADB representative

External References

Original Bugzilla Case crt.sh

Related Bugzilla IDs Mentioned

#1969036 #1793787 #1653680

Similar Local Cases

#1991558 RESOLVED Self Reported Incident Opened 2025-09-29 · Closed 2026-01-15 · 100% similar

IdenTrust: TLS self audit testing below 3%

AI Summary CA Owner

#2014609 RESOLVED Self Reported Incident Certificate Misissuance Opened 2026-02-05 · Closed 2026-04-11 · 100% similar

IdenTrust: Cross-signed root certificate mis-issuance

AI Summary CA Owner

#2014610 RESOLVED Self Reported Incident Incident Opened 2026-02-05 · Closed 2026-04-11 · 99% similar

IdenTrust: Root OCSP Signer certificate mis-issuance

AI Summary CA Owner

#2016585 RESOLVED Self Reported Incident Incident Opened 2026-02-12 · Closed 2026-06-15 · 98% similar

IdenTrust: Test Certificates from cross-signed roots not disclosed in CT Logs

AI Summary CA Owner

#2026351 RESOLVED Self Reported Incident Certificate Misissuance Opened 2026-03-25 · Closed 2026-05-18 · 98% similar

Identrust: Root CrossSign, of dedicated Roots, missing EKU

AI Summary CA Owner

#2006483 RESOLVED Self Reported Incident Opened 2025-12-16 · Closed 2026-01-20 · 97% similar

IdenTrust: CT Logging Mistakes

AI Summary CA Owner

#2014590 RESOLVED Self Reported Incident Incident Opened 2026-02-04 · Closed 2026-04-23 · 97% similar

IdenTrust: Unauthorized OCSP responses for cross-signed roots

AI Summary CA Owner

#2025914 RESOLVED Self Reported Incident Audit Delay Opened 2026-03-24 · Closed 2026-05-18 · 97% similar

IdenTrust: Full Incident Report for bug 2014610 was not published within 14 days of discovering the issue

AI Summary CA Owner